For purposes of this section, “personal data” has the meaning provided in the General Data Protection Regulation (EU) 2016/679 as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (“GDPR”). <br> <br>Lawful bases for processingWe process personal data subject to GDPR on one or more of the following legal bases:<ul> <li>Legal Obligation: to conduct anti-fraud and identity verification and authentication checks and to fulfill our retention obligations; </li> <li>